b98969203c6edd96d925a0b1cb2cfed8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b98969203c6edd96d925a0b1cb2cfed8
Size

600KB
MD5

b98969203c6edd96d925a0b1cb2cfed8
SHA1

7be092599169a4229b36a35c7a47a1c7473f15ac
SHA256

28e881730379d7b5606accbbb81c89c3d26decc7f59c6c18e77a2a49314537a7
SHA512

a325e8c7c7e055ca9c219656c6cb1e03c5ce4d9b0596977c343be5e12aa8c1f92f0f91a4044292e55ef18d1beab62c96431df9c55a94d17c17d027adc1a6660c
SSDEEP

3072:zYCT+umGh/xY46e1xnhrjsjcdvsBlcRkJhJDJHW+DfcOdxhioy1xrRRDjir1vfh:89Yr3Djir1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b98969203c6edd96d925a0b1cb2cfed8

Files

b98969203c6edd96d925a0b1cb2cfed8
.exe windows:4 windows x86 arch:x86

bd8bf016a3deb17ee33e82d54ed958e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord595
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
ord681
ord685
ord100
ord616
ord617
ord650
ord581

Sections

.text
Size: 592KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ